Create instance fails with nova.rpc.amqp ImageNotAuthorized: Not authorized for image

asked 2012-04-11 13:47:06 -0600

elvinas-piliponis gravatar image

Week ago (or so) did an update to latest available Ubuntu packages (at that time), today did update to todays packages. I was unable to update keystone, so I have deleted keystone DB and recreated all users. I then updated user and tenant ID's in nova and glance DBs for correct user ID mapping. It might be that I might have forgot some place but I am unable to find any references to old ID's and Nova region (RegionOne changed to nova).

Now I am unable to start new instances due to image authentication issue (euca-**, glance and nova commands works perfectly so no general Keystone authentication problems). No errors on master node. Computing node does report the following traceback:

2012-04-11 15:25:00 TRACE nova.rpc.amqp Traceback (most recent call last): 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/rpc/amqp.py", line 252, in _process_data 2012-04-11 15:25:00 TRACE nova.rpc.amqp rval = node_func(context=ctxt, *node_args) 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/exception.py", line 114, in wrapped 2012-04-11 15:25:00 TRACE nova.rpc.amqp return f(args, *kw) 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 177, in decorated_function 2012-04-11 15:25:00 TRACE nova.rpc.amqp sys.exc_info()) 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/contextlib.py", line 24, in __exit__ 2012-04-11 15:25:00 TRACE nova.rpc.amqp self.gen.next() 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 171, in decorated_function 2012-04-11 15:25:00 TRACE nova.rpc.amqp return function(self, context, instance_uuid, *args, *kwargs) 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 651, in run_instance 2012-04-11 15:25:00 TRACE nova.rpc.amqp do_run_instance() 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/utils.py", line 945, in inner 2012-04-11 15:25:00 TRACE nova.rpc.amqp retval = f(args, *kwargs) 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 650, in do_run_instance 2012-04-11 15:25:00 TRACE nova.rpc.amqp self._run_instance(context, instance_uuid, *kwargs) 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 451, in _run_instance 2012-04-11 15:25:00 TRACE nova.rpc.amqp self._set_instance_error_state(context, instance_uuid) 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/contextlib.py", line 24, in __exit__ 2012-04-11 15:25:00 TRACE nova.rpc.amqp self.gen.next() 2012-04-11 15:25:00 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 420, in _run_instance 2012-04-11 15:25:00 TRACE nova.rpc.amqp image_meta = self._check_image_size(context, instance ... (more)

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2012-04-12 07:50:17 -0600

elvinas-piliponis gravatar image

Well, after almost two days of wondering why second cluster does not work I have found the culprit.

nova.conf was missing the following line: ---auth_strategy=keystone

Without ir nova-compute does not attempt to auth agaisnt Keystone and send auth token to Glance.

What is strange is that other functions (I can delete instances, start/stop, pause/resume) are not affected by this missing line.

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2012-04-11 13:47:06 -0600

Seen: 187 times

Last updated: Apr 12 '12